Remote Access Configuration Tasks
Before you begin to configure B-RAS, you need to collect the following information for the RADIUS authentication and accounting servers:
- IP addresses
- User Datagram Protocol (UDP) port numbers
- Secret keys
Each configuration task is presented in a separate section in this chapter. Most of the B-RAS configuration tasks are optional.
To configure B-RAS, perform the following tasks:
- Configure a B-RAS license.
- (Optional) Map a user domain name to a virtual router. By default, all requests go through a default router.
- (Optional) Set up domain name and realm name usage.
- (Optional) Specify a single name for users from a domain.
- Configure an authentication server on the router.
- (Optional) Configure UDP checksums.
- (Optional) Configure an accounting server on the router.
- (Optional) Configure Domain Name System (DNS) and Windows Internet Name Service (WINS) name server addresses.
- (Optional) Configure a local address pool for remote clients.
- (Optional) Configure one or more DHCP servers.
- Create a PPP interface on which the router can dynamically create an IP interface.
- (Optional) Configure AAA profiles.
- (Optional) Use vendor-specific attributes (VSAs) for Dynamic Interfaces.
- (Optional) Set idle or session timeout.
- (Optional) Limit the number of active subscribers on a virtual router (VR) or port.
- (Optional) Set up the router to notify RADIUS when a user fails AAA.
- (Optional) Configure a RADIUS download server on the router.
- (Optional) Configure the Session and Resource Control (SRC) client (formerly the SDX client).
- (Optional) Set baselines for AAA statistics or RADIUS authentication and accounting statistics.